CVE-2020-5147 | BDVDB-2026-147156 Detail

SonicWallSonicWall NetExtender

Description#

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-428 Unquoted Search Path or Element

References#

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023
http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html

Exploit#

No public exploit known

History#

Version 12021-01-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.